[319] in WWW Security List Archive
Secure www site FAQ
daemon@ATHENA.MIT.EDU (Frank Swift @ Home)
Mon Jan 16 20:02:06 1995
Date: Mon, 16 Jan 1995 11:55:05 -0800
To: adamsb@un.org, mbrennen@maverick.intecom.com
From: uncl@llnl.gov (Frank Swift @ Home)
Cc: www-security@ns2.rutgers.edu
Reply-To: www-security@ns2.rutgers.edu
FYI...just in case you missed it from bugtraq.
frank
&&&&&&&&
Date: Mon, 16 Jan 1995 13:58:36 +0000 (GMT)
From: Mr Martin J Hargreaves <ch11mh@surrey.ac.uk>
To: Ron Steriti <steriti@donald.cpe.uml.edu>
Cc: bugtraq@fc.net
Subject: Re: secure www site FAQ ???
Mime-Version: 1.0
Sender: owner-bugtraq@fc.net
Precedence: bulk
On 11 Jan 1995, Ron Steriti wrote:
> Is there a FAQ describing how to set up a secure www site?
> (gopher, mosaic)
I just wrote up some HTML on the WWW site here, which is set up
quite securely. It's available at
http://www.chem.surrey.ac.uk/~ch11mh/secure.html
It consists basically of "Get a cheap single purpose machine with
a free OS, and disabled every subsystem you don't need (all but networking)
then run all the security tools you can find on it and check it every day"
I hope this is useful (a lot of questions regarding secure http
servers seem to have come up recently). This does not address encrypting
servers - I may do something on this later.
Regards,
M.
----------------------------------------------------------------
| Martin Hargreaves, ch11mh@surrey.ac.uk|
| Undergraduate Computational Chemist |
| WWW Server Admin http://www.chem.surrey.ac.uk|
----------------------------------------------------------------
Frank Swift L-321 (Sent from Home)
Unclassified Computer Security Coordinator
Lawrence Livermore National Laboratory (LLNL)
7000 East Avenue L-321 Livermore CA 94550-9516
Voice: (510) 422-1463 FAX: (510) 423-0913
